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Amendment to the Claims: 

1 . (Currently Amended) A method of secret key agreement between 
a first [[(16)]] and a second [[(18)]] correspondent, the method comprising the acts of: 

(a) said first correspondent receiving a response A, from a source P 
[[(20)]] . said first correspondent comprising a first arithmetic logic unit ; 

(b) said second correspondent receiving a response B from said source 
P [[(20)]] , said second correspondent comprising a second arithmetic logic unit ; 

(c) said first correspondent generating (d-1) parity symbols as an 
output of a codeword W whose input includes said response A and a secret key K 
selected by said first correspondent [[(16)]]; 

(d) said first correspondent [[(16)]] transmitting said (d-1) parity 
symbols over a public communication channel [[(22)]] to said second correspondent 
[[(18)]]; and 

(e) said second correspondent [[(18)]] generating a [[word]] codeword 
W whose input includes said (d-1) parity symbols and said response B to determine 
said secret key K; 

wherein the secret key K may be determined from said (d-1) parity 
symbols and said response B by satisfying an inequality. 

dH(A.B) < = (d - 1 - k) / 2 

where 

dH(A,B) is a Hamming distance between symbol sequences A and 

B^ 

d is a minimum distance, and 

k is a number of symbols in the secret key K . 

2. (Currently Amended) The method of Claim 1, wherein said 
responses A and B are received by said respective first [[(16)]] and second [[(18)]] 
correspondents responsive to a challenge C generated from said respective first 
[[(16)]] and second [[(18)]] correspondents. 

3. (Original) The method of Claim 1, wherein said response A is 
comprised of a sequence of symbols of the form A=(al, an). 




4. (Original) The method of Claim 1, wherein said response B is 
comprised of a sequence of symbols of the form B=(bl, ,bn). 

5. (Original) The method of Claim 1, wherein said secret key K is 
comprised of a sequence of symbols of the form K=(kl, ,kk). 



6. (Cancelled) 



7. (Currently Amended) The method of Claim 1, wherein the codeword 
W2 is a Reed-Solomon codeword. 



8. (Currently Amended) The method of Claim 1, wherein the secret 
key K cannot be determined by someone other than said first and second 
correspondent [[(18)]] if the following inequality is satisfied, 

dH(A,E) >= d-1 

where: 

E is a symbol sequence obtained by an attacker [[(17)]] attempting to 
learn the secret key K, 

dH(A,E) is [[the]] a Hamming distance between the symbol sequences 
A and E.[[, and]] 

d is the minimum distanc e . 



9. (Currently Amended) A method of secret key agreement between 
a first and a second correspondent [[(18)]], the method comprising the acts of: 

during an enrollment phase: 

(a) sending to a source [[(20)]], a challenge C, from a first 
correspondent [[(16)]] at a time tl , wherein said first correspondent is a first 
computer ; 

(b) said first correspondent [[(16)]] receiving said response 
A to said challenge C; 

(c) sending to said source [[(20)]], said challenge, from said 
second correspondent [[(18)]] B at a time t2 , wherein said second 
correspondent is a second computer : 
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(d) said second correspondent [[(18)]] receiving a response B 
to said challenge C. 

during an encoding phase, said first correspondent [[(16)]]: 

(a) selecting a secret key K; 

(b) forming a codeword W using said secret key K and said 
response A to generate (d-1) parity symbols P; 

(c) transmitting said (d-1) parity symbols P to said second 
correspondent (18) over a public communication channel; 

during a decoding phase, said second correspondent [[(18)]]: 

(a) using said d-1 transmitted parity symbols and said response B to 
construct a [[word]] codeword W to determine the secret key K if said response A 
and response B match within a selected tolerance; 

wherein d is a minimum distance for correcting erasures and errors to 
provide said second correspondent with an ability to determine the secret key K 
transmitted from said first correspondent , 

10. (Original) The method of Claim 9, wherein said response A 
is comprised of a sequence of symbols of the form A=(al, an). 

11. (Original) The method of Claim 9, wherein said response B 
is comprised of a sequence of symbols of the form B=(bl, ,bn). 

12. (Original) The method of Claim 9, wherein said secret key K 
is comprised of a sequence of symbols of the form K=(kl, ,kk). 

13. (Currently Amended) The method of Claim 9, wherein the secret 
key K may be determined from said [[word]] codeword W if and only if [[the]] an 
inequality is satisfied 

dH(A,B) < = (d - 1 -k)/2 
where dH(A,B) is [[the]] a Hamming distance between symbol 
sequences A and B, 

d is the minimum distance, and 

k is [[the]] a number of symbols in the secret key K. 
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14. (Currently Amended) The method of Claim 9, wherein the 
codeword is a Reed-Solomon codeword. 

15. (Currently Amended) The method of Claim 9, wherein the secret 
key K cannot be determined from someone other than said first and second 
correspondent [[(18)]] if and only if the following inequality is satisfied: 

dH(A,E) >= d-1 

where 

E is a symbol sequence obtained by an attacker [[(17)]] attempting to 
learn the secret key K, 

dH(A,E) is [[the]] a Hamming distance between the symbol sequences 
A and E.[[, and]] 

d is the minimum distanc e . 

16. (Currently Amended) A method of secret key agreement between 
a first and a second correspondent [[(18)]], the method comprising the acts of: 

said first correspondent [[(16)]] receiving a response A from a source P 

[[(20)]]; 

said second correspondent [[(18)]] receiving a response B from said 
source P [[(20)]]; 

said first correspondent [[(16)]] generating (d-1) parity symbols as an 
output of a codeword W whose input includes said response A and a secret key K 
selected by said first correspondent [[(16)]]; 

said first correspondent [[(16)]] transmitting said (d-1) parity symbols 
and a pseudo-random function evaluated in A, over a public communication channel 
to said second correspondent [[(18)]]; and 

said second correspondent [[(18)]] generating a [[word]] codeword W 
whose input includes said (d-1) parity symbols, said pseudo-random function 
evaluated A, and said response B, to determine said secret key K selected by said first 
correspondent [[(16)]] if said response B matches response A within a minimum 
distance for correcting erasures and errors; 

wherein d is the minimum distance for correcting erasures and errors to 
provide said second correspondent a ability to determine the secret key K; and 

wherein said first and second correspondents include computers. 



17. (Currently Amended) The method of Claim 16, wherein the 
pseudo-random function is a hash function of the form h(A)=(h(al),. ..,h(an)), where 
A is the response A from said source P [[(20)]]. 



18. (Original) The method of Claim 1 6, wherein said response A 
is comprised of a sequence of symbols of the form A=(al 5 an). 



19. (Original) The method of Claim 16, wherein said response B 
is compri sed of a sequence of symbols of the form B^^l, ,bn). 



20. (Original) The method of Claim 16, wherein said secret key 
K is comprised of a sequence of symbols of the form K=(kl, ,kk). 



21. (Currently Amended) The method of Claim 16, wherein the 

secret key K may be determined from said [[word]] codeword W if the inequality is 
satisfied, 

dH(A,B) < - (d - 1 - k) 

where 

dH(A,B) is [[the]] a Hamming distance between symbol sequences A 

and B, 

d is the minimum distanc e , and 

k is [[the]] a number of symbols in the secret key K. 



22. (Currently Amended) The method of Claim 16, wherein the 

codeword W is a Reed-Solomon codeword. 



23. (Currently Amended) The method of Claim 16, wherein the secret 
key K cannot be determined from someone other than said first and second 
correspondents [[(18)s]] if the following inequality is satisfied: 

dH(A,E) >- d-1 

where 

E is an attacker [[(17)]] attempting to leam the secret key K, 
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dH(A,E) is [[the]] a Hamming distance between the symbol sequences 

A and E, and 

d is the minimum distance. 

24. (Currently Amended) A method of secret key agreement between 
a first and a second correspondent [[(18)]], the method comprising the acts of: 

during an enrollment phase: 

sending to a source [[(20)]], a challenge C, from said first 
correspondent [[(16)]] at a time tl . wherein said first correspondent is a first 
arithmetic logic unit ; 

receiving said response A to said challenge C; 
sending to said source [[(20)]], said challenge C, from said 
second correspondent [[(18)]] at a time t2 . wherein said second correspondent is 
a second arithmetic logic unit ; 

during an encoding phase: 

said first correspondent [[(16)]] selecting a secret key K; 
forming a codeword W using said secret key K, a response A 
received by said first correspondent [[(16)]] during an enrollment phase and d-1 
parity symbols P; 

transmitting said d-1 parity symbols P and h(A) a pseudo- 
random function of A from said first correspondent [[(16)]] to said second 
correspondent [[(18)]] over a public communication channel; 
during a decoding phase: 

using said d-1 transmitted parity symbols and said pseudo- 
random function evaluated in A by said second correspondent [[(18)]] to 
construct a [[word]] codeword W to determine the secret key K if said response 
A matches response B match sufficiently; 

wherein d is a minimum distance for correcting erasures and errors to 
provide said second correspondent with a ability to determine the secret key K 
transmitted from said first correspondent . 



25. (Original) The method of Claim 24, wherein the pseudo- 

random function is a hash function h(A)=(h(a_l) ? . . .,h(a_n)) 
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26. (Original) The method of Claim 24, wherein said response A 
is comprised of a sequence of symbols of the form A=(al, an). 

27. (Original) The method of Claim 24, wherein said response B 
is comprised of a sequence of symbols of the form B=(bl, ,bn). 

28. (Original) The method of Claim 24, wherein said secret key 
K is comprised of a sequence of symbols of the form K=(kl, ,kk). 

29. (Currently Amended) The method of Claim 24, wherein the secret 
key K may be determined from said [[word]] codeword W if the inequality is 
satisfied, 

dH(A,B) < = (d - 1 - k) 

where 

dH(A,B) is [[the]] a Hamming distance between symbol sequences A 



and B. 



d is th e minimum distance, and 

k is [[the]] a number of symbols in the secret key K. 



30. (Currently Amended) The method of Claim 24, wherein the 

codeword W is a Reed-Solomon codeword. 



3 1 . (Currently Amended) The method of Claim 24, wherein the secret 
key K cannot be determined from someone other than said first and second 
correspondents [[(16,18)]] if the following inequality is satisfied: 

dH(A,E) >= d-1 

where 

E is a symbol sequence obtained by an attacker [[(17)]] attempting to 

learn the secret key K, 

dH(A,E) is [[the]] a Hamming distance between the symbol sequences 

A and E^[[, and]] 

d is the minimum distance. 
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32. (Currently Amended) A method of secret key agreement between 
a first and a second correspondent [[(18)]], the method comprising the acts of: 

said first correspondent [[(16)]] receiving a response A from a source P 
[[(20)]], where A is a set of symbols , said first correspondent being a first computer ; 

said second correspondent [[(18)]] receiving a response B from said 
source P [[(20)]], where B is a set of symbols , said second correspondent being a 
second computer ; 

said first correspondent [[(16)]] ordering the set of symbols A into a 
sequence, al, ,aN; 

said first correspondent [[(16)]] computing a pseudo-random function 
of the ordered set of symbols A, h(A); 

said first correspondent [[(16)]] transmitting 

h(A)=(h(al),,..h([[an]]a$)) 3 where j = l....n. to said second correspondent [[(18)]]; 
and; 

said second correspondent [[(18)]] computing a pseudo-random 
function of the ordered set of symbols B, h([[b]]bj) . where j = l....n, for each symbol 
[[b]] in the set B; 

said second correspondent [[(18)]] computing a set S which includes 
all positions j for which there exists an element in B such that h([[aj]]jij) = h([[b]]_bj); 

said second correspondent [[(18)]] transmitting the set S back to said 
first correspondent [[(16)]]; and 

both first and second correspondents [[(16, 18)]] extracting a joint key 
J based on the symbols aj, j in S and for those symbols b in set B for which h([[aj]]_aj) 
= h([[b]] bi). 

33. (Original) The method of Claim 32, further comprising the 
act of extracting a secret key K from said joint key J using privacy amplification. 

34. (Original) The method of Claim 33, wherein using said 
privacy amplification includes using one of a random matrix multiplier for 
multiplication with the joint key J and the joint key J evaluated in a hash function. 

35. (Currently Amended) The method of Claim 32, wherein said 
responses A and B are received by said respective first [[(16)]] and second [[(18)]] 
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correspondents responsive to a challenge C generated from said respective first 
[[(16)]] and second [[(18)]] correspondents. 

36. (Currently Amended) The method of Claim 32, wherein said 
response A is comprised of a sequence of symbols of the form A=(al, [[an]]aj). 

37. (Currently Amended) The method of Claim 32, wherein said 
response B is comprised of a sequence of symbols of the form B=(bl, ,[[bn]]bj). 



38. (Original) The method of Claim 32, wherein said secret key 
K is comprised of a sequence of symbols of the form Kj=(kl ,kk). 



